samba - Jul 2006 - Setting ACLs fail

Hi,

when I try to Left-Click-Properties on any file or directory on my 
samba-server (named fileserver, my PDC) and select the "security"-tab,
all
acls are listed as before the upgrade from 3.0.21b to 3.0.23, but when I 
click on "Add" I get the following error:
'The program cannot open the required dialog box
because it because it cannot determine whether the compter named 
"FILESERVER" is joined to the domain.' followed by 'Unable to
display the user selection dialog. The system cannot find message text for
message number 0x%1 in the message file for %2'. (German: 'Das Programm
kann
das erforderliche Dialogfeld nicht ?ffnen, da nicht ermittelt werden kann, 
ob Computer "FILESERVER" einer Dom?ne zugeordnet ist.' and
'Der Dialog zur
Benutzerauswahl konnte nicht angezeigt werden. Das System hat keinen 
Meldungstext f?r die Meldungsnummer 0x%1 in der Meldungsdatei %2 gefunden.')

Logging on and all usual tasks seems to work as before the update. To my 
mind this error occoures everytime when Windows wants to get a user- and 
group-list from the PDC. Maybe this bug was introduced with the new groupmap 
handling, that windows gets some answer which it cannot handle correctly?

I only have these domain-groups mapped (samba 3.0.21b showed some more, but 
unmapped ones):
# net groupmap list
Domain Users (S-1-5-21-4031555581-2449722753-3032957831-513) -> users
sdeingeber (S-1-5-21-4031555581-2449722753-3032957831-1213) -> sdeingeber
Domain Admins (S-1-5-21-4031555581-2449722753-3032957831-512) -> 
administratoren
Domain Guests (S-1-5-21-4031555581-2449722753-3032957831-514) -> guests

In get the error on 3 different German Windows 2000 SP4 machines and one 
German Windows XP SP2 machine (this error occoures on all machines I 
tested). That's why I suppose it's not "just" a Windows bug,
cuz with
3.0.21b it worked fine.

Best regards,
 Sven

PS: Related to: https://bugzilla.samba.org/show_bug.cgi?id=3811

Hello,

Sven Strickroth <sstrickroth <at> gym-oha.de> wrote:
> when I try to Left-Click-Properties on any file or directory on my
> samba-server (named fileserver, my PDC) and select the
"security"-tab, all
> acls are listed as before the upgrade from 3.0.21b to 3.0.23, but when I
> click on "Add" I get the following error:
> 'The program cannot open the required dialog box
> because it because it cannot determine whether the compter named
> "FILESERVER" is joined to the domain.' followed by
'Unable to
> display the user selection dialog. The system cannot find message text for
> message number 0x%1 in the message file for %2'.
I've got the same problem. I'm unable to set ACLs on my Samba-Server,
too.

After downgrading it worked again, but it's not a real soloution to me.
I don't believe it is a real windows bug, though it works with 3.0.21b.
It would be great if you fix it.

Regards,
Stefan